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We claim: 

1 . A method for authenticating a device connecting to a first network, comprising: 
determining if said device connected to at least one other network; and 

5 evaluating a content of said device based on whether said device connected to at 

least one other network. 

2. The method of claim 1, wherein said determining step further comprises the step 
of determining if said device connected to at least one untrusted network. 

10 

3. The method of claim 1, wherein said determining step further comprises the step 
of determining if said device connected to at least one unknown network. 

4. The method of claim 1, wherein said determining step further comprises the step 
15 of determining if a token on said device has been altered. 

5. The method of claim 1, wherein said determining step further comprises the step 
of logging an address of each network that said device accessed. 

20 6. The method of claim 1, wherein a scope of said evaluating step is based on 

properties of said at least one other network. 

7. The method of claim 1, wherein a scope of said evaluating step is based on one or 
more defined content authentication rules. 

25 

8. The method of claim 1, wherein said evaluating step further comprises the step of 
performing a virus scan. 
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9. An apparatus for authenticating a device connecting to a first network, 
comprising: 

a memory; and 

at least one processor, coupled to the memory, operative to: 
5 determine if said device connected to at least one other network; and 

evaluate a content of said device based on whether said device connected to at 
least one other network. 

10. The apparatus of claim 9, wherein said processor is further configured to 
10 determine if a token on said device has been altered. 

1 1 . The apparatus of claim 9, wherein said processor is further configured to evaluate 
a log of addresses of each network that said device accessed. 

15 12. The apparatus of claim 9, wherein a scope of said evaluating step is based on 

properties of said at least one other network. 

13. The apparatus of claim 9, wherein said processor is further configured to control a 
scope of said evaluation based on one or more defined content authentication rules. 

20 

14. A method for evaluating a device connecting to a network, comprising: 
evaluating a content of said device upon a request to access said network; and 
restricting access of said device to one or more restoration services if said content 

fails to satisfy one or more predefined criteria. 

25 

15. The method of claim 14, wherein said one or more predefined criteria includes a 
content item that is out of date. 

16. The method of claim 14, wherein said one or more restoration service updates a 
30 content item that is out of date. 
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17. The method of claim 14, wherein said one or more predefined criteria includes a 

determination that said device connected to one or more external networks. 

5 18. An apparatus for evaluating a device connecting to a network, comprising: 

a memory; and 

at least one processor, coupled to the memory, operative to: 
evaluate a content of said device upon a request to access said network; and 
restrict access of said device to one or more restoration services if said content 
10 fails to satisfy one or more predefined criteria. 

19. The apparatus of claim 18, wherein said one or more predefined criteria includes 

a content item that is out of date. 

15 20. The apparatus of claim 18, wherein said one or more restoration service updates a 

content item that is out of date. 

21. The apparatus of claim 18, wherein said one or more predefined criteria includes 
a determination that said device connected to one or more external networks. 

20 

22. The apparatus of claim 18, wherein said one or more restoration service reinstalls 
one or more programs. 

23. The apparatus of claim 18, wherein said one or more restoration service returns 
25 one or more configuration settings of said device to default values. 
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